Skip to main content
POST
Java (SDK)

Body

application/json
grant_type
enum<string>
required

OAuth2 grant type

Available options:
authorization_code,
refresh_token
client_id
string
required

OAuth2 client identifier

code
string

Authorization code from /v1/oauth2/authorize/confirm (required for authorization_code grant)

client_secret
string

Client secret (required for confidential clients and refresh_token grant)

code_verifier
string

PKCE code verifier (required for PKCE flow, replaces client_secret)

redirect_uri
string<uri>

Redirect URI (required for authorization_code grant, must match authorization request)

refresh_token
string

Refresh token (required for refresh_token grant)

Response

Tokens generated successfully

access_token
string
required

Bearer token for API authentication

token_type
enum<string>
required

Token type (always Bearer)

Available options:
Bearer
expires_in
integer
required

Access token expiration time in seconds (typically 3600 = 1 hour)

refresh_token
string

Token to refresh the access token

refresh_token_expires_in
integer

Refresh token expiration time in seconds (typically 2592000 = 30 days)

scope
string

Space-separated list of granted scopes